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REMARKS / ARGUMENTS 

Claims 1, 3-12, 14-43, 45-47, 49-51, 53-55 and 57 remain 
pending in this application. Claims 1 and 41 have been 
amended. No claims have been canceled. New claim 57 has been 
added . 

Priority 

Applicants appreciate the Examiner's acknowledgment of 
the claim for priority and safe receipt of the priority 
document . 

35 U-S.C. §103 

Claims 1, 9-11, 12, 22-24, 25, 28-33, 41-43, 45-47, 49-51 
and 53-55 stand rejected under 35 U.S.C. §103 (a) as being 
unpatentable over Duursma et al (U.S. Patent 2002/0103 884) in 
view of Levergood et al (U.S. Patent No. 5,708,780). These 
rejections are traversed as follows. 

The present invention is directed to an information 

distributing method in which displayed information A (the 

first information or primary information) contains a link to 

quoted information B (the second information) (see Fig. 15A) . 

As shown in Figs. 15A-C and described in the specification, 

document A includes a link for document B. When document B is 
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requested, such as by clicking on the link to document B, 
server B determines whether or not document B is permitted to 
be transferred to the client. If transfer is permitted, 
document B is transferred from server B (see Fig. 15B) . If 
not, an indication of this denial is indicated as shown by 
reference numeral 13 in Fig. 15C. 

In other words, it is determined whether or not the link 
to document is permitted to be transferred to the information 
user unit 120 (also referred to as information display unit) 
in response to an information request from the information 
user unit 120. This determination is based upon the 
identifying information (Uniform Resource Identifier (URI) ) 
included in the information request and information contained 
in a quotation allowance database (see Fig. 7) . It should be 
understood that the present invention does not merely relate 
to simple access control in which requested information is 
obtained with a browser program by inputting a (URI) to a 
system. Such type of simple access is shown, for example, by 
steps 201-203 in Fig. 3. On the other hand, the presently 
claimed invention includes steps 201-209 of Fig. 3. 

More precisely, as shown in Fig. 3, an information user 

unit 120 issues a request for primary information as shown in 

step 201. In response, the primary information is transmitted 
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and displayed (steps 202 and 203) . At step 204, program codes 

are requested by the information user unit 120. In response, 

a second information providing resource unit 110 sends program 

codes 4 (JAVA applet) to information user unit 120. At step 

206, information user unit 120 activates the program codes 

that are received. The program codes then acquire a URI of 

the first information and issue an information request 5 with 

a password included in the program codes to the second 

information providing resource unit 110 (steps 207 and 208) . 

Upon receiving the information request 5 for the quoted 

information, the common gateway interface (CGI) program of the 

second information providing resource unit 110 verifies the 

password (step 220 in Fig. 6) by checking whether or not the 

password matches a password stored in a password database (see 

Fig. 2) . Then, in step 221 the program determines whether or 

not an identifier of the requested information exists by 

checking a quotation allowance database that stores the 

identifier (ID) of the second (quoted) information and a URI 

of first information allowed for quotation (see Fig. 7) . Only 

after these steps are successfully passed does the program 

send the second (quoted) information to the information user 

unit 120 (step 223) . Otherwise, if these steps are not 

successfully passed, the program sends information indicating 
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that the transmission of the second information is not 
permitted (step 224 in Fig. 6) . 

Therefore, according to the present invention, two 
separate requests are made . First, a program request is sent 
and then an information request is sent to a second 
information providing resource unit 110 from the information 
user unit 120. Upon receiving the information request, the 
second information providing resource unit 110 determines 
whether or not it is permitted to transmit the second 
information to the information user unit 120 based upon 
identifying information (URI) included in the second request 
and information from a quotation allowance database (Fig. 7) . 

None of the cited references disclose the reception of 
two separate requests nor disclose that the URI and the 
quotation allowance database are used to determine whether or 
not the information request for quoting second information is 
permitted to be received by the information user unit 120. 
Instead, the prior art references merely disclose that the URI 
is used to specify a website or identify particular 
information for transfer of a document or information from the 
website. None of the cited references disclose or suggest the 
two steps of request that are made for quoted information, nor 
the two step determination of whether or not the second 
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request is permitted to be received by the information user 

unit 120 based upon the identifying information (URI) included 

in the request and information from a quotation allowance 

database (Fig. 7) . The quotation allowance database is a 

correspondence table which indicates a correspondence between 

an identifier code (ID) specifying second information for 

which quotation is allowed in the second information providing 

resource and an identifier of first information (URI) in the 

first information providing source. 

Duursma et al merely disclose a client-server network 

system. Duursma et al's system merely determines which 

application programs hosted by application servers are 

available for use by a user of a client node based upon 

information related to the user of the application and the 

hardware required to run the application. A host server 

receives application-related information corresponding to 

application programs hosted by a plurality of servers in a 

network. User credentials are received from the client's 

system. Whether each hosted application program is available 

to the client's system for execution is determined based upon 

user credentials and the received application-related 

information. Information is transmitted from the host server 

to the client's system to indicate each hosted application 
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that is available to the client's system for execution. The 
application-related information can be a variety of 
information including, as mentioned by the Examiner, an 
address of the server hosting that application, the 
application name and the user or groups of users who are 
authorized to use that application. Furthermore, the 
application-related information can also include the minimum 
capabilities required of the client node for establishing a 
connection to run the application. Therefore, according to 
Duursma et al , whether each hosted application is available to 
a user for execution is determined based upon user credentials 
and the received application-related information. 

Furthermore, Duursma et al are not concerned with 
displayed information that contains a link to an application 
program or document. As such, Duursma et al are completely 
silent with respect to a first document containing a link to a 
second document. Thus, it is understandable that Duursma et 
al are completely silent as to the access control to such a 
linked application or document. 

Duursma et al certainly do not disclose the reception of 
two separate requests nor disclose that the URI and the 
quotation allowance database are used to determine whether or 
not transmission of the linked document is permitted. Duursma 
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et al merely show a simple application access control in which 

an application program is not linked with another application 

or document. Furthermore, Duursma et al disclose determining 

whether or not this non- linked application program should be 

available based upon the information related to the user of 

the application and capabilities of the client node. 

The deficiencies in Duursma et al are not overcome by 

resort to Levergood et al . Levergood et al disclose that when 

a user selects a link that is directed to an access -controlled 

file, the server subjects the request to a secondary server 

which determines whether the client has authorization or a 

valid account. Upon verification, the user is provided with a 

session identification (SID) which allows the user to access 

the requested file as well as any other files within the 

protected domain. When a user sends a request (first 

information) to the server, if the user is an authorized user, 

the authentication server issues an SID to the user. For a 

new client, the authentication server may open a new account 

and issue an SID thereafter. A valid SID typically includes a 

user identifier, an accessible domain, a key identifier, an 

expiration time such as date, the IP address of the user's 

computer, and an unforgettable digital signature such as a 

cryptographic hash of all of the other items in the SID 
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encrypted with a secret key (see column 3, lines 21-43) . The 
SID does not include the URI . The authentication server then 
forwards a new request consisting of the original Uniform 
Resource Locator (URL) appended with the SID to the client in 
a REDIRECT. The modified request formed by the new URL is 
automatically forwarded by the client browser to the content 
server. The content server receives this information and 
validates the SID. If the SID is validated, the contents 
server sends the requested document for display. 

Therefore, it is clear that Levergood et al also fail to 
disclose how to access a second document or application 
contained in a link of a first document. Levergood et al also 
do not disclose how to specifically control access to the 
linked document or application. Therefore, it follows that 
Levergood et al neither disclose nor suggest the reception of 
two separate requests nor that the URI and the quotation 
allowance database are used for determining whether or not the 
transmission of the linked document or application is 
permitted. In Levergood et al , the URI of the user requesting 
an access controlled file is not contained in the request to 
the server. 
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Second Request for Interview 

Applicants previously requested that the Examiner conduct 
an interview with the undersigned prior to issuing a 
subsequent office action, but the undersigned was not 
contacted by the Examiner. As such, the Examiner is hereby 

requested to contact the undersigned by telephone to arrange 
an appropriate time for the interview. 



Conclusion 

In view of the foregoing, Applicant respectfully requests 
that a timely Notice of Allowance be issued in this case. 

Respectfully submitted, 




Reg. No. 34,663 
(703) 684-1120 
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